How can i get IL2CPP Method from method memory virtual address?

[NRTnarathip]

Hi, currently i try to make stacktrace & print method info by method virtual address
const methodAddress = DebugSymbol.fromAddress(address);
but i dont know how to get metadata about it
thanks.

[vfsfitvnm]

I do something similar here:

frida-il2cpp-bridge/src/tracer.ts

Lines 350 to 363 in a28fa2e

	for (const handle of handles) {
	if (handle.compare(Il2Cpp.module.base) > 0 && handle.compare(Il2Cpp.module.base.add(Il2Cpp.module.size)) < 0) {
	const method = searchInsert(handle);
	if (method) {
	const offset = handle.sub(method.virtualAddress);
	if (offset.compare(0xfff) < 0) {
	// prettier-ignore
	state.buffer.push(`\x1b[2m0x${method.relativeVirtualAddress.toString(16).padStart(8, "0")}\x1b[0m\x1b[2m+0x${offset.toString(16).padStart(3, `0`)}\x1b[0m ${method.class.type.name}::\x1b[1m${method.name}\x1b[0m`);
	}
	}
	}
	}

What you could do is iterating over all the assemblies, images and classes and collect all the methods. Then, build an array and sort it by virtual address. Then, use binary search to approximately get the method.
Keep in mind we only have the address of the first instruction of each method and we don't know how big a method is. So we assume a method instructions last until the next method begins. Of course this is imprecise.

However, there's definitely some metadata in the shared library. I recall seeing something interesting in libil2cpp.so, e.g. the method size of some methods. But I didn't investigate.

[NRTnarathip]

Cool it works fine, i hope in next update should have feature StackTrace like c# dotnet
🙏❤️

[vfsfitvnm]

Unfortunately I couldn't find a way to do that, and I'm not entirely sure whether it's even possible (in theory, it should). My knowledge is limited!